Ancestry offers genealogy and family history services, including DNA testing.

arXiv is an open-access archive for scholarly pre-print scientific articles.

The Centers for Disease Control and Prevention, is a US government agency providing health information and resources.

Creative Commons offers free licenses and tools to share and use creativity and knowledge.

A community for designers to showcase their work, find inspiration, and connect with others.

The Financial Times is a British daily newspaper providing global business and economic news.

The Federal Trade Commission is a US government agency enforcing consumer protection and antitrust laws.

NPM is a package manager for JavaScript, providing access to a vast registry of packages.

The New York Post (NY Post) is an american daily newspaper based in New York City.

Pixebay is a stock-photography website providing free images and videos for personal and commercial use.

ScienceDirect is Elsevier scientific publication platform.

Statista is a portal providing statistics, market data, and market research across various industries and countries.

South by Southwest (SXSW) are Conferences & Festivals, celebrating tech, film, music, and culture.

The Globe and Mail is a Canadian daily newspaper.

The Guardian is a UK newspaper.

Unsplash is an image discovery platform for free to use, high-definition images.

The World Health Organization (WHO) is an United Nations agency for global health matters and coordination of international health efforts.

Xumo is a video streaming platform.

Comcast CDN is a content delivery network provided by Comcast.

Lesta Games is a Russian video games company. Lesta Games is now in charge of World of Tanks, and other Wargaming games in Russia and Belarus.

Mir Tankov is the Russian and Belarusian version edited by Lesta Games of World of Tanks from Wargaming.

Baidu YiYan is the Baidu AI chatbot.

SkyShowtime is a streaming service that combines content from various entertainment brands, including NBC Universal, Paramount, and Sky.

Onde is a white labeled platform for management of taxis and ride hailing.

A cloud infrastructure provider offering scalable computing resources for developers.

The U.S. Food and Drug Administration is a US government agency for food, drugs, and public health.

Forbes is an american business magazine.

Gartner is a research and advisory company offering insights and tools for executives and their teams.

GoFundMe is a crowdfunding platform where individuals can raise money for personal causes and projects.

Instructables is a community-driven site where users share DIY projects and tutorials.

The New Yorker is an american magazine featuring articles on culture, politics, and humor.

The National Institutes of Health (NIH), is an US government agency responsible for biomedical and public health research.

The Atlantic is an American magazine from Washington, D.C. featuring articles on politics, culture, technology, health, and more.

TinyURL is a URL shortening service that creates short aliases for long URLs.

Variety is an american magazine on entertainment covering film, television, music, and theater.

TaxiF is a ride hailing application. This plugin classifies the website. The mobile applications are classified as onde_app, a white labeled ride hailing management platform.

MathLM is a license server for some Wolfram Research products such as Mathematica.

Multiple VLAN Registration Protocol (MVRP), defined by IEEE 802.1ak, is a layer 2 network protocol that allows dynamic VLAN configuration and management.

Chisel is a tunneling application maintaining an SSH connection over HTTP.

33Across is a programmatic advertising solutions.

Algolia is a website search engine provided as a service.

ASOS is a British online fashion and cosmetic retailer.

Best Buy is a multinational consumer electronics retailer.

Cvent provides software for event management and planning.

Dell is an IT and hardware solutions provider.

Digitaleo is a marketing automation software that helps businesses manage and optimize their marketing campaigns.

Fidelity Investments is a financial services corporation.

Gap is an American worldwide clothing and accessories retailer.

HDFC Bank is an Indian banking and financial services company.

Inspectlet is a website analytics tool for understanding users behavior.

Kohl's is an American department store retail chain.

Live365 is an internet radio network offering a variety of music and talk stations.

Lucidchart is an online diagramming application that allows users to create flowcharts and diagrams.

Lyft is a ride-sharing service that connects passengers with drivers.

Naukri.com is an Indian job search portal.

NetSuite provides cloud-based business management software.

Politico is an on-line newspaper that covers politics and policy.

Quizlet is an online learning tool that provides flashcards and study games.

Stile provides interactive science lessons.

Ticketmaster is a ticket marketplace for concerts or live events.

TripIt is a travel organizer app that creates itineraries from travel confirmations.

Twinkl provides educational resources for teachers and parents.

UEFA is the governing body of European football, organizing competitions and promoting the sport.

UPS provides global shipping and logistics solutions.

Zerodha is an online stock trading platform offering brokerage services.

Zillow is a marketplace to buy, rent or sell a home

Zomato is an online platform that provides information, menus, and user reviews of restaurants.

Zscaler provides cloud security solutions.

Claro Video is a popular video streaming platform hosting TV shows and movies.

Google Assistant is an intelligent personal assistant-like online service.

TechCrunch is a technology media property, dedicated to profiling startups, reviewing new Internet products, and breaking tech news.

Vice is a digital media company covering news, culture, and entertainment.

Muse.ai is a video hosting platform that includes a embed video player and advanced video search. This plugin classifies the website browsing traffic.

The Los Angeles Times is a daily newspaper.

IBM Aspera is a data transfer tool.

LabX is a laboratory software platform developed by Mettler Toledo, designed to unify instrument control, data acquisition, and data management.

Urban VPN is a VPN application.

Imonnit is a sensor data monitoring software. This plugin classify sensor traffic over port TCP/3000.

Dailymotion is a website where users can send or watch videos.

The DCE/RPC protocol is an RPC implementation used in Distributed Computing Environments. This protocol is used by many software applications including Microsft Exchange.

The DNS protocol is used to translate internet names (www.site.com) into IP address and vice versa. This protocol plug-in classifies DNS and its 'children' LLMNR, mDNS and DNSSEC (RFC 4033, RFC 3225), which are recognizable by the value of the Q_DNS_NAME_RESOLUTION_TYPE attribute. [ dns is also known as llmnr.]

The Ethernet protocol enables the addressing and sending of data between stations of an Ethernet segment.

Google Earth is a program used to view a virtual Earth in 3D. Part of the traffic generated on Windows and Mac is classified as google_maps.

The Hypertext Transfer Protocol (HTTP) is used for browsing the web.

The IMAP protocol (Internet Message Access Protocol Version 4) enables a client to access and manipulate electronic mail messages on a server.

The Internet Protocol allows logical addressing of stations over an interconnected system of networks.

IPv6 is the next generation protocol designed by the IETF to replace the current version Internet Protocol, IP Version 4 (IPv4).

The Internet Security Association and Key Management Protocol (ISAKMP) defines procedures and packet formats to establish, negotiate, modify and delete Security Associations (SA).

LDAP (Lightweight Directory Access Protocol) is a protocol used for accessing directory services. Windows environments use this protocol to send queries to Active Directory. [ ldap is also known as cldap.]

MySQL is an open source relational database management system (RDBMS) that uses Structured Query Language (SQL), the most popular language for adding, accessing, and processing data in a database. This plug-in support Bind Variables types and values extraction (Q_MYSQL_BIND_VARIABLE), using session context storage. This can cause significant per-session memory consumption, depending on traffic and database usage. Check MySQL layer proto tunes to define limits related to this usage.

Network Time Protocol (NTP) is a time synchronization system for computer clocks through the Internet network. It provides mechanisms to synchronize time and coordinate time distribution in a large network.

QQ is the most popular free instant messaging computer program in China.

RTP is the real-time transport protocol used to transmit real-time data, such as audio, video or simulation data, over multicast or unicast network services. This signature also classifies the SRTP and ZRTP encrypted transport protocols. [ rtp is also known as zrtp and srtp.]

Skype is an instant messaging and voice over IP application edited by Microsoft. [ skype is also known as skype_for_business.]

The Server Message Block protocol (SMB) provides a method for client applications to read and write to files and to request services from server programs in a computers network. This protocol plug-in supports SMB/SMB2 protocols, as well as SMB 3.0 when SMB Multichannel is not in use. The SMB RDMA (Remote Direct Memory Access) implementation over the iWarp stack (incl. SMB Direct) is supported.

SOAP is a lightweight protocol based on XML intended for exchanging structured information in a decentralized, distributed environment. Note: this protocol can be found in HTTP requests, but it won't be classified if some known web application or service was classified instead.

Secure Sockets Layer (SSL) is a commonly-used protocol for managing the security of a message transmission on the Internet. SSL has recently been succeeded by Transport Layer Security (TLS), which is based on SSL.

TCP is a protocol providing a connection-oriented and reliable transfer service. It is used by most TCP/IP applications today (IANA protocol number: 6).

The User Datagram Protocol is a transport protocol providing a simple but non-reliable message transfer service in IP networks. It is used by most applications that do not require a reliable delivery transmission service. (IANA protocol number: 17).

This protocol is the ajax based version of Webmail Yahoo.

Google Ads is the online advertisement service from Google. This signature includes classification of DoubleClick, Google AdSense, Google AdMob and Google AdWords technologies.

American website with a search engine which lists answers to internet users questions.

Steam is a digital distribution, digital rights management, multiplayer and communications platform developed by Valve Corporation.

Online microblogging service that enables its users to read and send text-based short messages.

VK, or VKontakte, is a Russian social network edited by the VK Group.

Zoo.gr is a social networking and online games website.

Yandex is a Russian search engine.

The PPStream protocol provides audio and video streaming. It is based on bittorrent (peer-to-peer) technology. It is mainly used in China. The PPStream activity was integrated in the iQiyi video platform by Baidu in 2013.

Fsecure_update is the protocol used for fsecure software updates.

Viber is a free embedded voice over-ip application, for smartphones.

SharePoint is a web application platform designed as a centralized replacement for multiple web applications, like content management and document management systems.

Fluxiom is an online file management in the cloud.

Photo sharing web-service, with advanced editing features, available for desktop and mobile devices.

Internet proxy/redirector which allows uncensored access to web content.

This protocol is a generic layer used as a base for all the services running on top of Google platforms.

This protocol is a generic layer used as a base for all the services running on top of Amazon platforms.

News website dedicated to the NBA, featuring video clips.

nfl.com is the NFL website.

NYTimes.com is the website of The New York Times daily.

Reuters provides business, financial, national and international news.

News portal dedicated to sports.

Xvideos is a free adult videos website.

Line is a Japanese Instant Messaging and Voip application for smartphones and PCs. Please note : the parent attribute 'call' and its children are deprecated for Line (since mid-2014) but can be extracted from SIP.

Indonesian news portal.

Amazon AWS is a cloud-computing platform offered by Amazon, that includes Amazon Elastic Compute Cloud (EC2) and Amazon Simple Storage Service (S3).

Money Today is an economic media in Korea.

Tistory is a South Korean blog-hosting service.

Interpark is a ticketing website.

KBS is a national public broadcaster in South Korea, operating radio, television and online services.

Amazon Prime Video is an online video on demand service owned and operated by Amazon.

Online video publishing platform very popular in China.

Edgio, formerly Limelight Networks after its acquisition of Edgecast, offers Content Delivery Network, content streaming, and other edge-enabled applications.

DTLS stands for Datagram Transport Layer Security protocol. It provides communications privacy for datagram protocols, and prevents eavesdropping, tampering, or message forgery.

Yahoo is a pseudo-protocol which classifies generic web services related to Yahoo.

KIK Messenger is a Chinese Instant Messaging service. KIK now also includes the Rounds service which is a a live social platform.

WeChat is a text and voice messaging application for mobile. This plug-in classifies file transfers, chat and audio/video calls. Tencent is the owner of QQ and Wechat

Online market place for selling goods and auctions.

cnYES.com is the most trusted and consulted leading financial portal among the Chinese online professionals.

China Telecom email services.

Chinese beauty and fashion portal.

Game applications and web portal for Tencent games.

Chinese version of the Wall Street Journal.

Taiwanese Photo Album and Blog.

Chinese fashion portal.

This signature classifies part of the flows related to the Google IM and audio/video calls applications both for PC and mobile devices. The Google Meet, Google Hangouts, Google Allo, and Google Duo applications are partially classified by this signature. The RTP audio/video flows of Meet, Hangouts, and Duo are classified using DNS Caching and STUN metadata. [ gtalk is also known as google_hangouts, google_allo and google_duo.]

CloudFlare CDN is a content delivery network with advanced security and analytics features. Cloudflare also provides a DDoS prevention tool.

Office 365 is a Microsoft on-line service, with pay-as-you-go subscription (monthly or annually), giving access to many Microsoft Office applications from the internet, as well as cloud storage, Skype communications, etc. It also gives free access to the on-line version of the most popular Office applications (Word, Excel, Powerpoint).

On-line service that allows users to attach personal elements on some kind of pinboard.

International news webportal.

Advanced voice recognition system used on some Apple iPhone devices.

The WebSocket Protocol, as described in IETF RFC6455. Note: in most cases, Websocket flows are classified over HTTP. In some rare cases - when there is an indication in the SNI - the flow will be classified over HTTPS.

CYworld is a South Korean social network service which belongs to nate.com. ( http://www.nate.com/cymain/?f=auto_cymain )

Online payment services

Softonic.com is a software download portal based in Barcelona

Spanish news web portal, also accessed from Uruguay and Colombia.

HTTP Live Streaming (HLS) is a method for streaming multimedia proposed by Apple, standardized by RFC8216.

Singaporian online banking website

Algerian sports new portal

Qatari online classified ads.

French Polinesian radio broadcast website.

Austrian online classified ads.

The Hotspot Shield application secures internet connections made from public access points using a VPN network.

Norwegian news portal

Mauritanian news portal

New Zealander news portal.

Nigerian news portal

Irish banking website

This protocol plug-in classifies the traffic related to Amazon advertising services.

Games for mobile devices by Gameloft.

BitLord is a free BitTorrent client. This plugin classifies the traffic to the software company website. The generated traffic by this software is classified as bittorrent.

F-Secure Corporation is a Finnish computer security company

On-line music shop website. This plug-in classifies both search and music download workflows.

Facebook Messenger is a text and voice messaging application for mobile devices, and also a web application for desktop or mobile web browsers. Facebook Messenger provides both text chat and audio/video communication. On mobile devices, this plug-in classifies Audio flows, Video flows, as well as Text Chat-related flows. On the web application, when running Internet Explorer, this plug-in only classifies the browsing and chat flows. On all platforms, photos and file transfers are classified as facebook. This plugin also classifies the Lasso application.

Nielsen is a global information and measurement company that enables companies to understand consumers and consumer behavior.

Zalo is a vietnamese mobile IM application created by VNG Corporation with audio/image file send feature. The HTTP/HTTPS traffic generated by this application may either be classified as Zalo or Zing.

AAJTAK is a popular site in India used for streaming videos.

Hootsuite is a social media management system.

Amazon Cloud Drive is a cloud application which allows photos and videos storage.

Singaporean website about hitec gears. Includes product guides and classified ads as well.

Getty Images distributes still imagery, video, music and multimedia products, as well as other forms of premium digital content

Google Calendar is a Google free online calendar.

QUIC is an open networking protocol developed primarily at Google for transporting web content.

PubMatic is an advertising company.

Amazon Ad Server is an advertisement product and network from Amazon. It is built on the product of the former Sizmek company, that was also known as MediaMind, Eyeblaster and Rocket Fuel.

Helpshift is a support desk platform for native apps.

Cambodian website about different topics including current news and lifestyle.

Fastly is a real-time CDN.

Storytel is a digital subscription service that enables audio book listening from browser or smartphones.

On-line version of Microsoft Excel.

Kenyan news website, including top stories, politics, business, sports, and lifestyle.

The NeuLion Digital Platform provides digital video broadcasting, distribution and monetization of live and on-demand content.

jQuery is a javascript library.

Bulgarian pirate movie torrent search engine, also featuring a video player (P2P).

OneDrive (previously SkyDrive, Windows Live SkyDrive, and Windows Live Folders) is a file hosting service. Important: most of the traffic is encrypted with generic Microsoft certificates. The classification of this service then needs non-encrypted traffic to be injected.

This signature classifies hosts owned by Microsoft.

Bangladeshi news portal.

Slack is an online team collaboration tool, featuring both a web browser application and mobile apps.

Zoom Video Conferencing, also referred to as Zoom by users, combines video conferencing, online meetings, and mobile collaboration into one platform.

Palestinian news portal.

Indicates that a flow is proxied through HTTP CONNECT mechanism.

Local Guides is a global community of explorers sharing their discoveries on Google Maps.

News website localized in Argentina.

Clash of Clans is a free-to-play mobile MMO strategy video game developed by Supercell.

Amazon Music is an online music store.

On-line version of Microsoft Word.

On-line version of Microsoft Powerpoint.

Signal Private Messenger is an instant messaging mobile application that implements the Signal secured protocol.

Armenian Internet Portal featuring TV Series, Shows, Movies, Music and Radio.

Hockey Curve is a marketing technology service provider.

Audible Inc. is a seller and producer of spoken audio entertainment owned by Amazon.

Amazon Chime is a fully-managed communications service in the cloud.

This signature classifies chrome remote desktop based on DNS caching and SSL common name on PC as well as on Mobile

Pirate movie streaming and download blog.

Dutch online banking website. This plugin classifies the traffic on rabobank.nl.

Mongodb is a relational database management system (RDBMS).

Google Cloud Platform is a suite of cloud computing services that runs on the same infrastructure that Google uses internally for its end-user products.

Clash Royale is an online mobile game by Supercell.

krcom.cn is a chinese video website.

Fast Adaptative and Secure Protocol (FASP) is developed by the company Aspera. It's a transfer protocol of high performance.

x-vpn unblock the web securely, privately and anonymously on your Android devices. x-vpn was formerly FastLemon VPN

Akamai Video is the Akamai cloud service for video streaming (used for Media Services Live, the Old HD Flash 1.0 Solution, and Media Services On-Demand technologies).

Cisco Systems, Inc. is an American multinational technology. This plugin classifies the website browsing.

IronSource is a digital content company.

TikTok is a social network application acquired by ByteDance and previously known as Musical.ly. It allows its users to share live stream video content.

Mobile Legends is an online multi-player video game.

AWS Console is a web application for managing Amazon Web Services.

Apple News is a mobile app and news aggregator developed by Apple Inc.

Fuze (formerly known as ThinkingPhones) is a provider of cloud-based Unified Communications as a Service (UCaaS).

Mining pool for cryptocurrency named Monero (blockchain).

SkyVpn encrypts your data to secure your connection as a VPN using domain fronting and encrypted traffic.

Cognito is an Amazon AWS server allowing to keep track of user.

This plugin classifies FLEXNet license servers and Flexera website.

This plug-in used to classify Amazon AppStream, a remote desktop uses to manage applications running in virtual machines on Amazon platform.

Gaode Map is a chinese online mapping service. Gaode Map belongs to Alibaba Group which has acquired AutoNavi which offers its map services at Amap.com. It is also known as Gaode in China.

This plug-in classifies some web sites developed with go language (https://golang.org/)

Kuwo provides music streaming services.

Agora SDK is a WebRTC framework.

Shopify is an online service to build e-commerce websites.

Doordash is a food delivery service platform. This plugin classifies traffic generated on Chrome and iOS.

Fifa is a football video game edited by EA Sports. This plugin classifies video game online traffic.

Kochava provides analytics services. This plugin classifies traffic to kochava.com.

Alexa is the Amazon virtual assistant.

Minute Media is a digital media company. This plugin classifies website traffic.

Path of Exile is a free online-only action RPG.

Hotels.com is an online booking or finding hotels platform. This plugin classifies website and iOS application traffic.

Indeed is an online job search platform. This plugin classifies website and iOS application traffic.

Amazon Prime Now is the Amazon platform for independent contractors to provide delivery services.

The Walt Disney Company, commonly known as Disney is an American diversified multinational mass media and entertainment conglomerate. This plugin classifies website traffic.

Bilibili is a Chinese video sharing platform.

BlueJeans is a cloud video conferencing platform.

Twilio is a cloud communication platform. This plugin classifies website traffic.

This plugin classifies application and website browsing of Pinduoduo and does not manage live video streaming. Pinduoduo is a Chinese e-commerce company.

SPICE, Simple Protocol for Independent Computing Environments, is a VDI protocol for remote desktop, open-sourced by Red Hat. It is used in virtualization platforms based on Libvirt.

HubSpot is a CRM provided as a SaaS, that can be integrated on a website, including chat and marketing emails.

IPVanish VPN is a VPN service provider.

VPN by Google is a VPN offered in the Android system of Pixel 7 and above smartphones. This replaces Google One VPN that have been discontinued in June 2024.

Bosch Conettix is a security alarm product line. This plugin classifies the D6600 and B426 when no encryption is configured.

Paramount Global (formerly known as ViacomCBS) is an American multinational mass media and entertainment conglomerate. This plugin classifies website access.

Tantan is a Chinese dating application. This plugin classifies website and mobile application browsing traffic.

Rutube is a Russian video streaming platform.

NordVPN is a VPN service distributed by Nord Security.

China Telecom is a Chinese telecommunications company. This plugin classifies website and iOS application browsing.

Tivoli Storage Manager, renamed Spectrum Protect, is a backup software from IBM. This plugin classifies versions before Spectrum Protect Plus.

FA Premier League is the the English Football Championship. This plugin classifies official website and applications of the Premier League browsing traffic.

8x8 is a UCaaS (Unified Communications as a Service) provider. This plugin classifies the 8x8 Meet application.

Aloha VPN is a VPN service distributed by Aloha Mobile.

Genshin Impact is an action role-playing game developed and published by Mihoyo.

ProtonVPN is an anonymizing VPN edited by Swiss company Proton AG.

Surfshark is an anonymizing VPN edited by Surfshark BV.

Star VPN is a VPN client.

Amazon Luna is a cloud based gaming subscription service from Amazon. Games are streamed to the browser.

Deutsche Telekom is a German telecommunications company.

Protocol used by control software and some Accu-Sort barcode scanners from Datalogic.

Amazon WorkSpaces is a desktop virtualization service provided by Amazon AWS.

Claude is an AI assistant developed by Anthropic.

Freshworks Inc. is a cloud-based customer engagement software company that provides a suite of products like Freshdesk.

Ring is a company owned by Amazon providing home security and smart home devices. This plugin classifies the Ring Doorbell, the website and mobile applications traffic.

Amazon Fire TV is a media player developed by Amazon.

Amagi is a cloud platform for TV networks and content owners. This plugin classifies the website traffic.

AnyViewer is a remote desktop software.

Antivirus update

Background service

Application/Protocol used to transport audio or video content

Protocol used for authentification purposes

Protocol classified by non-deterministic criteria based on statistical analysis of packet form and session behavior.

Compression layers

Protocol used for database remote queries

Encryption protocol

Enterprise Resource Planning application

File transfer protocol

Protocol used for user-to-user file transfers via Instant-Messaging applications.

Web forum

Gaming protocol

Instant messaging application

Email exchange protocol

Microsoft office sub-protocol

Platform protocol for remote procedure calls

Protocol used for IT management

Low level network protocol

Peer to peer application

Printer commmunication protocol

Network routing protocol

Workstation security application

Basic layers defined by Qosmos

Telephony core network protocol

Remote terminal protocol

Remote control protocol

Tunneling protocol

Mobile specific transport protocol

Generic web traffic

Web email application

Custom Family